JP2006011894A - Automatic id password creation program and automatic id password creation system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an automatic ID password creation program and an automatic ID password creation system; to allow a user to easily have candidates for an ID/password presented and correct it as necessary to determine it by installing the program in the user's terminal; to automatically urge the user to update the ID/password when update period comes; and to present the ID/password after urging the user to input a question and an answer if he or she forgets the ID/password. <P>SOLUTION: The program includes a step for combining a plurality of inputted character sequences to create and present a plurality of candidates for an ID/password; a step for repeating a process in which, when one of the candidates is selected either directly or after being corrected, the ID/password selected is checked against other ID/passwords and determined as such if it matches none of the other ID/passwords, whereas if it matches any of the other ID/passwords, a plurality of ID/passwords are created and presented again; and a step for urging the user to input one or a plurality of pairs of questions and answers when he or she forgets the ID/password. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an ID / password automatic creation program and an ID / password automatic creation system for creating an ID / password.

  Conventionally, a client such as a personal computer is operated to connect to a server via a LAN or network, and an ID and a password are input to access the server to perform various business processes.

  At this time, if the user forgets his / her own ID and password, an inquiry is separately made by calling the administrator, etc., the ID and password are received by mail, etc., and these are input to perform business processing.

Also, if the ID or password is stolen by another person, the other person can easily access the server as the user, so that the personal information is registered and the server cannot be accessed unless the personal information matches. Security was improved (Patent Document 1).
Japanese Patent Laid-Open No. 03-053369

  In the above-mentioned conventional former technique, if the user forgets the ID and password, the user accesses the server and performs business processing unless he or she separately receives the ID and password forgotten by the telephone and etc. There was a problem that there was inconvenience that could not be performed.

  In addition, with the above-described conventional latter technique, security can be enhanced based on personal information registered in addition to ID and password. If the forgotten ID and password are not received, there is a problem that the server cannot be accessed to perform business processing.

  In order to solve these problems, the present invention installs a program on a user's terminal, combines a plurality of character strings input by the program, presents ID / password candidates, and is selected or corrected by the user. Decide the ID / password and enter the question and answer to be inquired at the time of forgetting, conceal and save or send to the server to save, automatically urge ID / password update when the update period comes, When the ID / password is forgotten, a question and an answer are input from the screen and the ID / password is presented when it matches the stored content.

  Therefore, by installing the program in the user's terminal, the user can easily present ID / password candidates, modify and decide as necessary, and automatically enter the ID / password when the update period comes The ID / password can be presented by inputting a question and an answer when forgetting.

  The present invention installs a program in the terminal of the user, so that the user can easily present ID / password candidates and make corrections as necessary to determine the ID automatically when the update period arrives. It is possible to prompt the user to update the password / password, and to present the ID / password by inputting a question and an answer when forgetting.

  The present invention installs a program on a user's terminal, combines a plurality of character strings input by the program, presents ID / password candidates, and the user selects or modifies the ID / password to determine and forget Enter questions and answers that are sometimes inquired, conceal them and save them or send them to the server to save them, prompting them to update their IDs / passwords automatically when the update period has arrived, and on-screen when the ID / password is forgotten It was realized that the ID / password was presented when the question and answer were input from the above and the contents matched with the stored contents.

FIG. 1 shows a system configuration diagram of the present invention.
In FIG. 1, a terminal (client) 1 is a terminal such as a personal computer, and is a terminal for performing various business processes by connecting to a server 3 via a network (LAN, Internet, etc.). A password creation program 11, a forgetting support program 12, a personal information DB (confidentiality) 13, a display device 14, an input device 15 and the like.

  The ID / password creation program 11 is installed in the terminal (client) 1 to create ID / password candidates (representing IDs or passwords, and the same below) (FIGS. 2, 3 and so on). (See FIG. 5, FIG. 6, FIG. 8, etc.)

  The forgetting support program 12 registers a pair of questions and answers in preparation for forgetting an ID / password, or presents an ID / password when the pair of questions and answers entered when forgetting an ID / password match. (See FIGS. 2, 4, 7, 8, 10, etc.).

  The personal information DB 13 stores user personal information (information such as ID / password, update time, question and answer pairs) in a concealed manner (for example, encoding and encryption) (see FIG. 8). In the terminal 1, the ID / password may be stored only in the personal information DB 31 in the server 3, and the ID / password may be inquired via the network each time.

The display device 14 is a display device (such as a liquid crystal panel) that displays a screen.
The input device 15 is an input device for the user 16 to input an ID / password, and is a keyboard or a mouse.

  The user 16 is a user who operates the terminal (client) 1, inputs an ID / password, connects to the server 3 via the network, and performs various business processes.

  The network 2 is a network such as a LAN or the Internet that connects a number of terminals (clients) 1 and a server 3 to each other.

  The server 3 is connected to a large number of terminals (clients) 1 via the network 2 to provide various business services (services such as providing data and providing business processing). Here, the personal information of the user It is comprised from personal information DB31 etc. which preserve | save and manage.

  The personal information DB 31 stores the user's personal information (ID / password, information such as update time, question / answer pairs as necessary) (see FIG. 8).

  Next, in accordance with the order of the flowchart of FIG. 2, an operation for automatically creating an ID / password and setting a question / answer pair for forgetting the ID / password in the configuration of FIG. 1 will be described in detail. .

  FIG. 2 is a flowchart for explaining the operation of the present invention (ID / password, question / answer registration). Here, the user 16, the client 1, and the server 3 correspond to the user 16, the terminal (client) 1, and the server 3 in FIG.

  In FIG. 2, S1 installs a program. This makes it possible to install the ID / password creation program 11 and the forgetting support program 12 of FIG.

  S2 is activated. This starts the program (here, ID / password creation program 11) installed by the user 16 in S1.

  In S3, an input screen is displayed. For example, the ID / password creation program 11 activated in S2 displays, for example, a menu screen shown in FIG.

  S4 is input. In this case, the user 16 inputs a plurality of character strings necessary when creating a combination of ID / password from the input screen (for example, the menu screen of FIG. 5) displayed in S3.

  In S5, combination processing is performed. This is because the ID / password creation program 11 combines a plurality of character strings input from the user 16 in S4 and a plurality of ID / password candidates, for example, (b-1) and (b-2) in FIG. , (B-3) candidates are created.

  S6 displays ID and password candidates. This displays a plurality of ID and password candidates created by the ID / password creation program 11 in S5 on the screen of the display device 14 of the terminal 1.

  In S7, it is determined whether the user has selected candidate selection, recombination, or manual correction.

    When the candidate is selected (when one of the plurality of candidates displayed in S6 is selected), the process proceeds to S9.

    -When manual correction is selected (when one of a plurality of candidates displayed in S6 is selected to perform manual correction), the candidate selected by the user 16 is manually corrected in S8 After setting the desired ID and password, the process proceeds to S9.

    If a recombination is selected (if none of the multiple candidates displayed in S6 is desired and a recombination is selected), the process returns to S5 and the ID / password creation means 11 again performs the combination The process is performed to create a plurality of candidates, and S6 and subsequent steps are repeated.

  In S9, the ID / password generating means 11 of the client 1 selects the selected candidate when it is determined that the candidate is selected in the determination of S7, or the candidate after the manual correction when the manual correction is selected in the determination of S7. The candidate is accepted as an ID or password.

  S10 inquires. This is because the candidate (ID or password) received in S9 is inquired of the server 3 and checked in S10-1, or the personal information DB 13 that the client 1 conceals and stores is checked. Determine if it is already registered.

  S11 obtains a search result. This obtains the result inquired in S10 (search result, result with or without the same).

  In S12, it is determined whether there is a search result having the same result or no search result. If yes, it is determined that the same ID or password has already been registered, and the process returns to S5 and is repeated. If there is none, it is found that the same ID or password is not registered, so a confirmation response is made.

In S13, the user 16 confirms the confirmation response.
In S14, the user 16 sees the confirmation response in S13 and determines OK or NG. If it is determined that the user 16 determines OK, the process proceeds to S15. On the other hand, if it is determined that the result is NG, the process returns to S5 and is repeated.

S15 displays a question screen. This displays a question screen, for example, a screen (not shown) for inputting one or more pairs of questions and correct answers (answers) shown in FIG.

S16 is input. In this case, when the user 16 forgets the ID / keyword on the question screen displayed in S15, one or more pairs of questions and answers for inquiries are input. For example ・ Question 1: Driver's license number Answer: 458405213728
・ Question 2: XX birth month Answer: 9
The two sets of are input.

  S17 and S18 are registered. In this case, the following information shown in the figure including the question and answer pair input in S16 is registered in the personal information DB (confidentiality) 13 of the client 1 or the personal information DB 31 of the server 3 or both.

・ ID / password:
・ Questions / answers:
·system-name:
・ Update time:
·User name:
Here, the ID / password is an ID / password determined to be OK in the determination of S14. The questions / answers are one or a plurality of sets of questions and answers set by the user 16 as inquiry information when the user forgets the ID / password in S15. The system name is the system information of the client (terminal) 1 in which the ID / password is registered (when the ID / password is forgotten, it is forgotten unless the question / answer pair is entered correctly from the client (terminal) 1 with the same system name. This is security information for preventing ID / password from being presented). The update time is a time for prompting to update the newly registered ID / password. The user name is the user name (user identifier) who requested creation of the ID / password.

  As described above, the user 16 installs and starts the ID / password creation program 11 and the forgetting support program 12 on the terminal (client) 1 and inputs a plurality of character strings to automatically create an ID / password to create a candidate. Present and select one of the candidates, or select one of the candidates and manually correct, or let the combination process be performed again to present another candidate and select / select to manually correct If the same item is not already registered, it is determined as an ID / password, and one or more pairs of questions and answers at the time of forgetting are input, and these determined ID / password, question and answer 1 One or a plurality of sets, and system information for creating an ID / password (ID / password must be inquired from the terminal 1 having the same system information at the time of forgetting) Security information for not presenting a de), it is possible to be registered in the personal information DB13,31 in accordance with the update time.

  FIG. 3 shows a flowchart (update) for explaining the operation of the present invention. Here, the user 16, the client 1, and the server 3 correspond to the user 16, the terminal (client) 1, and the server 3 in FIG.

In FIG. 3, S21 takes out the update time.
S22 determines. These S21 and S22 determine whether the update time given to the ID / password read out in S21 by the ID / password creation program 11 of the client 1 has passed or has not passed. If it is determined that the time has elapsed, the process proceeds to S23. If it is determined that it has not elapsed, the process returns to S21 and is repeated.

  S23 displays an update screen. Since it is determined that S22 has passed and the update time has passed, an update screen shown in FIG. 9 (a) to be described later is displayed for the passed ID / password.

  S24 is input. This is because the user 16 who has viewed the update screen of FIG. 9A displayed in S23 selects and inputs an update (clicks the “YES” button on the update screen of FIG. 9A), Alternatively, continuation is selected and input (click the “NO” button on the update screen in FIG. 9A).

In S25, the result input in S24 is determined. If it is determined to be updated, the process proceeds to S3 in FIG. 2A, and a plurality of character strings are input and combined, and a plurality of candidates are presented and selected to update to a new ID / password. Perform the process. On the other hand, if it is determined to continue, a message is displayed in S26, for example, “Update time has passed, but it will not be updated. Please pay attention to security.”
A warning message is displayed to call attention.

  As described above, when the update period has passed for the ID / password automatically created and registered according to the flowchart of FIG. 2 described above, an update screen that automatically prompts the user 16 to update (update screen of FIG. 9A) Is displayed and the ID / password is re-created and updated, or when it is not updated, a warning message to pay attention to security can be displayed.

  FIG. 4 is a flowchart for explaining the operation of the present invention (when forgetting). Here, the user 16, the client 1, and the server 3 correspond to the user 16, the terminal (client) 1, and the server 3 in FIG.

  In FIG. 4, S31 is activated. This instructs the user 16 to start the program of the terminal (client) 1 of FIG.

  S32 starts the program. In response to the activation instruction in S31, this activates and operates a program (a program for setting the terminal (client) 1 in an operating state, a main program).

  S33 displays a menu. This is because the main program activated in S32 displays a menu (not shown).

  In S34, “support for forgetting” is selected. For this, “Forgetting support” is selected on the menu of S33.

In S35, the forgetting support program 12 is activated.
In S36, the forgetting support program 12 displays a search screen.

  The user 16 inputs S37. These S36 and S37 display, for example, a question input screen of the forgetting support program shown in FIG. 10 to be described later, and the user 16 inputs one or a plurality of user names, questions and correct answers (answers).

  S38 and S38-1 are collated. This is based on the user name input in S37, and the personal information 13, 31 in FIG. 8 is searched for one or a plurality of combinations of questions and correct answers (answers) (user name and question). And correct answer (answer) pairs are completely matched).

  S39 determines. This is determined as OK or NG with respect to the result collated in S38 and S38-1. If it is determined to be OK, the user name entered in S37, one of the questions and correct answers (answers), or a plurality of combinations, all match those registered in the personal information DBs 13 and 31. Therefore, the ID and password are taken out in S40, displayed on the screen of the display device 14 in S41, and notified to the user 16. On the other hand, when it is determined as NG in S39, the number of times control determination is performed in S42, and the process proceeds to S43.

  In S43, it is determined whether the number-of-times restriction does not apply and is OK or NG. If it is determined to be OK, the process returns to S37 to prompt the user 16 to input again (re-input of one or a plurality of sets of user name, question and correct answer (answer)). On the other hand, if it is determined as NG, the process returns to S33 and a menu is displayed.

  As described above, when forgetting the ID / password, select “support for forgetting” from the menu to display and enter a screen for inputting a user name, a question and a correct answer (answer), and the registered user name By providing an ID / password when a question and correct answer match completely, security was ensured when one or more of the question and correct answer set separately at the time of forgetting were entered and matched completely It is possible to present the ID / password when forgotten with a simple system configuration.

  FIG. 5 shows an example of the menu screen of the present invention. This is a screen example in which the user 16 inputs a plurality of character string candidates in S4 of FIG. 2 described above, and has the following message and input fields shown in the figure.

ID / password automatic creation system Enter any character string.

(Character string 1 (input field 1))
(Character string 2 (input field 2))
(Character string 3 (input field 3))
...
(Character string n (input field n))
Enter the number of characters to generate.

(5 (input field for entering the number of characters))
As described above, by inputting a plurality of sets of arbitrary character strings and specifying the number of ID / password characters to be automatically created by combining them, the combination processing (described later with reference to FIG. 6) is performed in S5 of FIG. ) And a plurality of ID / password candidates ((b-1), (b-2), (b-3) in FIG. 6) of the number of characters desired by the user 16 can be presented.

FIG. 6 is an explanatory diagram (combination process) of the present invention.
FIG. 6A shows a state where the following character strings shown as character strings 1, 2, and 3 are respectively input.

-Character string 1: jam
-Character string 2: unimm
-Character string 3: pakli
FIG. 6B shows a candidate example. This is a plurality of ID / password candidate examples generated by combining the character strings 1, 2, 3 of FIG. 6A. From the character strings 1, 2, 3 of FIG. The candidates extracted and arranged in the order of 1), (2), (3), (4), and (5) are shown.

(B-1) in FIG. 6 shows the candidate “Japan”. This candidate “Japan” is about character strings 1, 2, and 3 in FIG.
-The first "j" in string 1
-The first "a" in character string 2
-The first “p” in string 3
・ The second “a” in string 1
・ The second “n” in string 2
The above five (when the number of characters to be generated in FIG. 5 is set to 5) are extracted and combined, and the candidate “Japan” is automatically generated.

(B-2) of FIG. 6 shows the candidate “umimm”. This candidate “umim” is the character string 1, 2 and 3 in FIG. 6A, following (b-1) in FIG.
・ The second “u” in string 3
・ The third “m” in string 1
・ The third “i” in character string 2
・ The third “m” in string 3
・ The fourth "m" in string 1
The five candidates are extracted and combined, and the candidate “umim” is automatically generated.

(B-3) of FIG. 6 shows the candidate “pakli”. This candidate “pakli” is the same as (b-2) in FIG.
・ The fourth “p” in string 3
-5th "a" in string 2
-The fifth "k" in string 3
-6th "l" in character string 2
6th “i” in string 3
The five candidates are extracted and combined, and the candidate “pakli” is automatically generated.

  As described above, it is possible to automatically generate a plurality of ID / password candidates by arbitrarily extracting the specified number of characters based on a plurality of character strings 1, 2, 3,.

  FIG. 7 shows an example of a question screen of the present invention. This is an example of a screen for inputting and setting (registering) a user ID (user name) in advance when setting a question and a correct answer (answer) in S15 of FIG. 2 described above.

  FIG. 8 shows an example of the personal information DB of the present invention. The personal information DB (confidentiality) 13 and the personal information DB 31 shown in FIG. 1 are provided in the terminal 1 or the server 3 of FIG. 1 described above to store the user's personal information, and correspond to the following information shown in the figure. Saved.

User name (user ID):
·password:
·system-name:
・ Update time:
・ Question 1:
-Question string 1:
-Correct answer (answer) 2:
・ Question 2:
-Question string 2:
-Correct answer (answer) 2:
・ Question 3:
-Question string 3:
-Correct answer (answer) 3:
...
Here, the user name (user ID) is an identification name for uniquely identifying the user, and is a user name (user ID) that is arbitrarily assigned or selected by the user according to the flowchart of FIG. 2 described above. . The password is a password automatically generated and selected according to the flowchart of FIG. 2 described above. The system name is system information for identifying the terminal (client) 1 used when the password or the like is automatically generated and registered, and the user name, the question, and the like must be from the same terminal (client) 1 when forgetting the ID / password This is security information for preventing the ID / password from being presented even if the correct set is correct. The update period is an update period that prompts the user to update the ID / password determined by automatic generation. One or any combination of a question and a correct answer (answer) is confirmation information for presenting a forgotten ID / password when the ID / password is forgotten when the set of the question and the correct answer (answer) is completely matched. .

  As described above, in addition to the user name (user ID) and password, the update time is registered, and when the update time has passed, the ID / password is automatically prompted to be updated. One or more correct answers (answers) are registered, and when the ID / password is forgotten, security is ensured by presenting the ID / password when the system name, question, and correct answer (answer) are completely matched This makes it possible to easily cope with forgetting an ID / password.

FIG. 9 shows a screen example (update) of the present invention.
FIG. 9A shows an example of a screen (update) that prompts an update when the update time of the automatically generated ID / password elapses. Here, the following message shown in the figure is displayed to prompt the user to update the ID / password.

Last update date: May 21, 2003 Do you want to update? (YES) OR (NO)
Here, if the (YES) button is clicked with the mouse, it is determined to be updated in S25 of FIG. 3 described above, and it is possible to automatically generate and update a new ID / password by repeating S3 and subsequent steps in FIG. It becomes. On the other hand, if the (NO) button is clicked with the mouse, it is determined that the process is continued in S25 of FIG. 3 described above, and the message “Please pay attention to security” is displayed in FIG. Can be encouraged.

  FIG. 9B shows a message example when the (NO) button is clicked in FIG. 9A.

  FIG. 10 shows an example of a question input screen of the forgetting support program of the present invention. The illustrated question input screen is an example of the search screen displayed in S36 of FIG. 4 described above, and is for inputting the following information in association with each other.

·User name:
・ Question 1: () Correct answer: ()
・ Question 2: () Correct answer: ()
・ Question 3: () Correct answer: ()
...
When one or a plurality of combinations of user name, question and correct answer (answer) are input from the above screen, the personal information DBs 13 and 31 registered in FIG. / It becomes possible to present a password.

  The present invention installs a program in the user's terminal so that the user can easily present ID / password candidates and make corrections as necessary to determine the ID automatically when the update period arrives. It is possible to prompt the user to update the password / password, and to present the ID / password by inputting a question and an answer when forgetting.

It is a system configuration diagram of the present invention. It is an operation explanation flowchart (ID / password, question / answer registration) of the present invention. It is operation | movement description flowchart (update) of this invention. It is operation | movement description flowchart (at the time of forgetting) of this invention. It is an example of the menu screen of this invention. It is explanatory drawing (combination process) of this invention. It is an example of the question screen of this invention. It is an example of personal information DB of this invention. It is a screen example (update) of this invention. It is an example of a question input screen of the forgetting support program of the present invention.

Explanation of symbols

1: Terminal (client)
11: ID / password creation program 12: Forgetting support program 13, 31: Personal information DB
14: Display device 15: Input device 16: User 2: Network 3: Server

Claims (5)

In the ID / password automatic creation program that creates ID or password or both (hereinafter referred to as ID / password)
On the computer,
Inputting a plurality of character strings from which an ID / password is created;
Generating and presenting a plurality of ID / password candidates by combining the plurality of input character strings;
When one of the plurality of presented ID / password candidates is selected or modified and then selected, the selected ID / password is collated and determined to be an ID / password when it does not match the others And repeatedly generating and presenting the plurality of ID / password candidates when they match,
Inputting one or more pairs of questions and answers at the time of forgetting;
An ID / password automatic creation program for operating as a step of storing the determined ID / password and the question / answer pair at the time of forgetting.   When a predetermined update period elapses after storing the ID / password, a screen for prompting the update of the ID / password is displayed. When update is selected, a plurality of character strings are input again and a plurality of IDs are entered. 2. The ID / password automatic creation program according to claim 1, wherein the ID / password automatic creation program is generated when a password candidate is generated and presented and selected or corrected.   When one or more pairs of questions and answers entered on the screen at the time of forgetting the ID / password, the stored questions and answers at the time of forgotten match completely 3. The ID / password automatic creation program according to claim 1, further comprising a step of presenting a set of IDs / passwords.   When the set of the question and answer at the time of forgetting is completely matched, the system information of the terminal that has input the set of the question and answer is further the system information of the terminal that has input the stored set of question and answer 4. The ID / password automatic creation program according to claim 3, further comprising the step of presenting the matched ID / password when matched. In the ID / password automatic creation system that creates ID / password,
Means for inputting a plurality of character strings from which an ID / password is created;
Means for generating and presenting a plurality of ID / password candidates by combining the plurality of input character strings;
When one of the plurality of presented ID / password candidates is selected or corrected and then selected, the selected ID / password is collated and determined to be an ID / password when it does not match the others Means for repeatedly generating and presenting the plurality of ID / password candidates when they match,
Means for inputting one or more pairs of questions and answers at the time of forgetting;
A system for automatically creating an ID / password, comprising means for storing the determined ID / password and a set of questions and answers at the time of forgetting.

Images